Configuring Private VLANs

CLI (Command Line Interface)

Displaying VLAN Information

Command	Function

show vlan	Syntax:
This command shows VLAN	show vlan [id vlan-id name vlan-name private-vlan private-
information.	vlan-type]
information.	• id - Keyword to be followed by the VLAN ID.
	• id - Keyword to be followed by the VLAN ID.
	• vlan-id - ID of the configured VLAN. (Range: 1-4094, no leading zeroes)
	• name - Keyword to be followed by the VLAN name.
	• vlan-name - ASCII string from 1 to 32 characters.
	• private-vlan - For an explanation of this command see “show vlan private-
	vlan” on page 4-162
	Default Setting: Shows all VLANs.
	Command Mode: Normal Exec, Privileged Exec
	Example: The following example shows how to display information for VLAN 1:
	Console#show vlan id 1
	Vlan ID:	1
	Type:	Static
	Name:	DefaultVlan
	Status:	Active
	Ports/Port channel:	Eth1/ 1(S) Eth1/ 2(S) Eth1/ 3(S) Eth1/ 4(S)
	Eth1/ 5(S)
		Eth1/ 6(S) Eth1/ 7(S) Eth1/ 8(S) Eth1/ 9(S)
	Eth1/10(S)
		Eth1/11(S) Eth1/12(S) Eth1/13(S) Eth1/14(S)
	Eth1/15(S)
		Eth1/16(S) Eth1/17(S) Eth1/18(S) Eth1/19(S)
	Eth1/20(S)
		Eth1/21(S) Eth1/22(S) Eth1/23(S) Eth1/24(S)
	Eth1/25(S)
		Eth1/26(S)
	Console#

show interfaces status vlan	See page 234.

show interfaces switchport	See page 236

Private VLANs provide port-based security and isolation between ports within the assigned VLAN. This switch supports two types of private VLAN ports: promiscuous, and community ports.

A promiscuous port can communicate with all interfaces within a private VLAN.

Community ports can only communicate with other ports in their own community VLAN, and with their designated promiscuous ports.

This section describes commands used to configure private VLANs.

To configure private VLANs, follow these steps:

1.Use the private-vlancommand to designate one or more community VLANs and the primary VLAN that will channel traffic outside the community groups.

2.Use the private-vlan association command to map the secondary (i.e., community) VLAN(s) to the primary VLAN.

3.Use the switchport mode private-vlancommand to configure ports as promiscuous (i.e., having access to all ports in the primary VLAN) or host (i.e., having access restricted to community VLAN members, and channeling all other traffic through a promiscuous port).

4.Use the switchport private-vlanhost-associationcommand to assign a port to a secondary VLAN.

5.Use the switchport private-vlan mapping command to assign a port to a primary VLAN.

6.Use the show vlan private-vlancommand to verify your configuration settings.

NXA-ENET24 - Software Management Guide	259

NXA-ENET24 specifications

The AMX NXA-ENET24 is a versatile and powerful networked control interface designed to meet the growing demands of modern AV systems. This network switch offers an exceptional combination of reliability, performance, and scalability, making it an ideal choice for professional environments such as conference rooms, educational facilities, and control rooms.

One of the key features of the NXA-ENET24 is its 24-port configuration, allowing for extensive connectivity options. Each port supports 10/100/1000 Mbps speeds, ensuring that high bandwidth applications are handled with ease. Additionally, the switch incorporates advanced auto-negotiation technology, which automatically configures the optimal speed and duplex mode for connected devices. This ensures seamless connectivity and minimizes the risk of network disruptions.

The NXA-ENET24 is designed with advanced management capabilities, including support for VLANs, which helps to segment network traffic for enhanced security and performance. Network administrators can easily create virtual local area networks to optimize traffic flow and reduce congestion. This feature is particularly beneficial in environments where multiple AV systems operate concurrently.

Another significant characteristic of the NXA-ENET24 is its support for Power over Ethernet, or PoE. This feature enables the switch to deliver electrical power alongside data through the network cables. As a result, devices such as IP cameras, VoIP phones, and wireless access points can be powered directly from the switch, simplifying deployment and reducing the need for additional power sources.

Monitoring and management of the switch are made easier through a user-friendly interface. The NXA-ENET24 supports SNMP for network management, allowing users to monitor performance metrics, configure settings, and receive alerts in case of issues. This level of oversight is crucial for maintaining the stability of AV systems in mission-critical applications.

Durability is another hallmark of the NXA-ENET24 design. The switch features a robust chassis that is engineered to withstand the rigors of professional use. With cooling mechanisms in place and a fanless design, the NXA-ENET24 operates quietly and efficiently, making it suitable for environments where noise is a concern.

In conclusion, the AMX NXA-ENET24 is a powerful, reliable, and feature-rich network switch that effectively supports modern AV applications. With its extensive connectivity options, advanced management capabilities, PoE support, and durable design, it is an excellent choice for integrators and organizations looking to optimize their network infrastructure.

AMX NXA-ENET24 manual Configuring Private VLANs, Displaying Vlan Information

Models: NXA-ENET24

Displaying VLAN Information

Displaying VLAN Information

Command

Function

show vlan

Syntax: